This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft File: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft (raw, json) Hash identifier: 2vWsM1ONcVvj2zx6aoodpfLe3VGR6AOm662owJNCYOw= Subject key identifier: A0:7B:C0:3E:31:59:F9:1A:23:BA:03:F8:89:E7:59:C9:4E:96:ED:50 Authority key identifier: 94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C Certificate issuer: /CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Certificate serial: 2C8FF56D7C73B2CC942BDEAA39A899459B35CC72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft Manifest number: 0109 Signing time: Sat 20 Dec 2025 13:31:51 +0000 Manifest this update: Sat 20 Dec 2025 13:26:51 +0000 Manifest next update: Sun 21 Dec 2025 15:16:51 +0000 Files and hashes: 1: 326131343a373538343a333030303a3a2f34382d3438203d3e20313532333638.roa (hash: MnToG5/hHH9Scp/i63sn6+7U3FU6WhprF2dCg9QmzZ4=) 2: 326131343a373538343a333030313a3a2f34382d3438203d3e20313532333638.roa (hash: RycjpThYIZhrgAMUdYbKLisjcTcczyRyV0B6ob/yXcs=) 3: 946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl (hash: 2rPq8/uziY2pVpt0jUOKRbGrvBASF+rcZQs0IFfgb94=) 4: 326131343a373538343a333030323a3a2f34382d3438203d3e203530313034.roa (hash: Crxg8Afd9H4uvcM/AEMgGkuEVpajXoOdPvRiA2PLFc4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:16:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8f:f5:6d:7c:73:b2:cc:94:2b:de:aa:39:a8:99:45:9b:35:cc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C Validity Not Before: Dec 20 13:26:51 2025 GMT Not After : Dec 21 15:16:51 2025 GMT Subject: CN=A07BC03E3159F91A23BA03F889E759C94E96ED50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:5f:d2:4c:e7:81:c9:b4:de:8e:a9:ec:8e: 1e:1c:bb:76:a4:c7:5d:1a:40:bf:95:7f:aa:d0:66: 3c:b4:96:89:44:c7:6f:85:5e:00:1d:f6:ca:f2:a4: b6:72:53:9e:cf:9b:ed:df:aa:d5:15:16:c5:f0:b7: a1:4a:77:b4:c1:09:c9:0b:69:2f:fd:af:86:df:24: 5d:9f:c3:3f:6e:bd:55:22:e8:a0:16:8f:52:cb:5e: 2a:cc:8e:7b:c0:92:d1:f5:9e:5c:8a:2a:e6:ee:78: 58:c6:2a:8d:aa:c3:5d:c4:5d:e3:c8:ba:14:47:30: 8e:77:d7:cb:aa:76:ad:c6:b1:d5:ea:d3:d0:a6:b8: 57:c4:fc:9d:70:7e:ad:7d:a1:df:6e:d0:17:1d:49: 9d:85:b5:02:44:cc:75:b8:db:69:6f:3a:c4:5e:b5: 64:99:b4:c2:84:dd:63:03:94:92:b1:fd:a9:e5:d1: 1e:b5:f2:3a:97:b0:19:69:fa:ac:43:e6:e1:91:dc: 61:a9:31:74:02:09:3a:9c:62:34:3e:dd:7f:b9:5c: ed:a8:01:8a:9b:cc:25:a9:25:94:7f:77:4e:cd:a2: f7:8f:54:f5:c2:5e:6c:7b:3d:4d:3b:3e:fc:bf:5b: b4:b7:4b:3f:00:f0:e6:1b:1b:d1:c5:e6:f7:be:0e: 70:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:7B:C0:3E:31:59:F9:1A:23:BA:03:F8:89:E7:59:C9:4E:96:ED:50 X509v3 Authority Key Identifier: keyid:94:6D:E1:5D:34:BE:AE:24:E2:9E:A1:6A:3F:E1:E6:59:1B:27:AD:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1bd306b4-e5c3-48f9-b2ee-36a9bdded8c4/7/946DE15D34BEAE24E29EA16A3FE1E6591B27AD9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:ad:e4:d4:82:88:05:3d:d6:92:77:1e:42:75:8a:78:a9:07: 2f:e8:e1:ad:37:8d:a6:9b:5b:59:cf:47:8f:36:6f:84:95:0a: a7:82:e9:38:dd:af:7c:7c:74:cb:13:e4:08:98:bd:d6:65:61: 5d:4b:80:55:3c:63:9b:f1:25:4c:cb:f6:b4:67:f8:9f:56:73: f4:9f:a0:9a:19:74:8a:79:6e:58:ab:ef:d4:2b:0c:99:64:a9: 1b:c5:02:4a:62:d3:c8:dc:34:a4:ae:6c:3d:bb:45:a9:84:d9: 28:b0:74:37:3c:40:79:e6:59:1f:a3:c1:9a:ad:81:07:88:4c: 95:60:ef:d0:fd:ca:43:dc:7e:71:c6:13:41:f6:7d:a9:98:eb: 0c:7f:a2:7a:b2:c8:74:70:98:ac:4a:a1:e7:10:84:21:00:94: bc:91:ee:d3:a8:ff:a6:9b:bd:2c:36:2c:a2:ce:eb:c2:33:0e: 66:46:bb:22:d1:16:ff:f2:27:02:2f:a2:bd:ab:5d:cf:7e:bf: 66:e9:56:85:05:b0:62:51:44:31:3e:ad:c6:c0:0f:59:80:1d: 00:85:47:73:83:38:b1:dc:d5:20:d9:96:19:15:9c:9f:5b:d2: 14:57:61:51:d4:3e:56:1f:4a:17:40:9b:12:bf:cb:24:d2:d1: f7:52:58:a7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIULI/1bXxzssyUK96qOaiZRZs1zHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkx QjI3QUQ5QzAeFw0yNTEyMjAxMzI2NTFaFw0yNTEyMjExNTE2NTFaMDMxMTAvBgNV BAMTKEEwN0JDMDNFMzE1OUY5MUEyM0JBMDNGODg5RTc1OUM5NEU5NkVENTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorF/STOeBybTejqnsjh4cu3ak x10aQL+Vf6rQZjy0lolEx2+FXgAd9srypLZyU57Pm+3fqtUVFsXwt6FKd7TBCckL aS/9r4bfJF2fwz9uvVUi6KAWj1LLXirMjnvAktH1nlyKKubueFjGKo2qw13EXePI uhRHMI5318uqdq3GsdXq09CmuFfE/J1wfq19od9u0BcdSZ2FtQJEzHW422lvOsRe tWSZtMKE3WMDlJKx/anl0R618jqXsBlp+qxD5uGR3GGpMXQCCTqcYjQ+3X+5XO2o AYqbzCWpJZR/d07NovePVPXCXmx7PU07Pvy/W7S3Sz8A8OYbG9HF5ve+DnDbAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUoHvAPjFZ+RojugP4iedZyU6W7VAwHwYDVR0j BBgwFoAUlG3hXTS+riTinqFqP+HmWRsnrZwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWJkMzA2YjQtZTVjMy00OGY5LWIyZWUtMzZhOWJkZGVk OGM0LzcvOTQ2REUxNUQzNEJFQUUyNEUyOUVBMTZBM0ZFMUU2NTkxQjI3QUQ5Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC85NDZERTE1RDM0QkVBRTI0RTI5RUExNkEz RkUxRTY1OTFCMjdBRDlDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzFiZDMwNmI0LWU1YzMtNDhmOS1iMmVlLTM2YTliZGRlZDhjNC83Lzk0NkRFMTVE MzRCRUFFMjRFMjlFQTE2QTNGRTFFNjU5MUIyN0FEOUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbreTU gogFPdaSdx5CdYp4qQcv6OGtN42mm1tZz0ePNm+ElQqnguk43a98fHTLE+QImL3W ZWFdS4BVPGOb8SVMy/a0Z/ifVnP0n6CaGXSKeW5Yq+/UKwyZZKkbxQJKYtPI3DSk rmw9u0WphNkosHQ3PEB55lkfo8GarYEHiEyVYO/Q/cpD3H5xxhNB9n2pmOsMf6J6 ssh0cJisSqHnEIQhAJS8ke7TqP+mm70sNiyizuvCMw5mRrsi0Rb/8icCL6K9q13P fr9m6VaFBbBiUUQxPq3GwA9ZgB0AhUdzgzix3NUg2ZYZFZyfW9IUV2FR1D5WH0oX QJsSv8sk0tH3Ulin -----END CERTIFICATE-----Generated at Sun Dec 21 06:52:55 2025 by rpki-client